Is CVE-2026-103417 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-103417

Description

Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.